[clamav-users] fp detection is false

[Al Varnell]

Gene,

Although your posting that here might reinforce the report we got earlier today, the files must be submitted to http://www.clamav.net/reports/fp before anything can happen.

If you think this is a serious issue then post the hash values of the submitted files back here so they can be located faster.

FYI, the signature was added by daily - 22573 Sunday, so there is a good chance you are correct.

-Al-

On Mon, Nov 21, 2016 at 11:31 PM, Gene Heskett wrote:
> 
> Greetings all;
> 
> This is another copy of this same .pdf:
> 
> /home/gene/Downloads/Download/MC6809-MC6809E 8-Bit Microprocessor 
> Programming Manual (Motorola Inc.) 1981.pdf: Pdf.Exploit.CVE_2016_1091-2 
> FOUND
> 
> So it barked on both copies. But it also hasn't been modified since I 
> acquired it.
> gene at coyote:~/Downloads/Download$ ls -lt MC*.pdf
> -rw-rw-r-- 1 gene gene 4095092 Dec  4  2011 MC6809-MC6809E 8-Bit 
> Microprocessor Programming Manual (Motorola Inc.) 1981.pdf
> gene at coyote:~/Downloads/Download$ ls -l MC*.pdf
> -rw-rw-r-- 1 gene gene 4095092 Dec  4  2011 MC6809-MC6809E 8-Bit 
> Microprocessor Programming Manual (Motorola Inc.) 1981.pdf
> 
> So I believe both detections are false.
> 
> Cheers, Gene Heskett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3573 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20161122/c3280060/attachment.bin>